To Configure the Creation Attributes

Click Creation Attributes under the Object Creation tab.

Provide a mapping or default value for sn,
a mandatory attribute for the inetOrgPerson object class.

Active Directory has a corresponding attribute sn.
However, Windows NT does not have an equivalent attribute, so the special ** NO VALUE ** value is provided. Because Example Bank’s requirements
do not include creating users in Windows NT, this value does not appear in
any of the user entries. This value is only provided to conform to the Console’s
validations.

Configure the shadowmin, shadowmax, and shadowwarning attributes, which are used for PAM LDAP.

A shadowmin value of 7 implies that a user
must wait seven days from the time the password has changed before changing it again.

A shadowmax value of 30 implies that the
user must change the password at least every 30 days.

A shadowwarning value of 4 implies that
the user is warned that the password must be changed four days before the
password expires.

Directory Server attributes that are grayed-out are mandatory creation
attributes. The inetOrgPerson object class has cn and sn as mandatory attributes, and the shadowAccount object
class has uid as a mandatory attribute.